$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fb800bcf-022c-455e-b7cd-44f32fcec7fc.roa File: fb800bcf-022c-455e-b7cd-44f32fcec7fc.roa (raw, json) Hash identifier: /2PLvPxDiq/V2271Z8hd07ndYJoFiYjgbhVvWRtNzWw= Subject key identifier: 5D:07:9E:F8:72:BD:9A:3D:1B:4A:AE:7C:FD:24:E3:F9:B2:7C:45:54 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2A6633DF5227691A9DE01D55BB7A8AF788C46F17 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fb800bcf-022c-455e-b7cd-44f32fcec7fc.roa Signing time: Wed 05 Feb 2025 00:00:00 +0000 ROA not before: Wed 05 Feb 2025 00:00:00 +0000 ROA not after: Wed 12 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:f03e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:66:33:df:52:27:69:1a:9d:e0:1d:55:bb:7a:8a:f7:88:c4:6f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 5 00:00:00 2025 GMT Not After : Mar 12 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:30:70:61:bf:f2:fc:49:11:3b:51:f9:18:be: 95:27:7a:7b:22:ec:63:90:0b:c2:33:cc:3f:d1:84: a8:22:e1:19:77:39:e3:a2:41:a8:db:22:f3:14:cb: c5:8f:e7:43:08:ac:a9:bc:ca:ae:4d:5c:98:da:3a: aa:4e:a0:e4:5e:04:d5:d1:9a:3d:7a:d0:11:bc:a4: 3b:0e:5d:14:2c:28:c4:78:f9:3a:bc:98:63:94:68: 7d:d3:be:15:d5:66:63:31:cb:8e:05:d6:c6:7b:a2: 17:78:75:57:d6:7e:70:74:1a:73:61:f0:03:f2:83: 63:b5:41:8a:5a:1c:77:d8:11:d0:a9:f8:fd:da:43: f6:57:ca:eb:1c:de:3c:3e:40:93:c3:e8:af:9b:d6: a5:31:fe:05:93:f6:f0:0a:b2:18:e8:aa:e9:a4:8a: 67:21:ab:7e:0d:36:2c:6e:9f:73:6e:50:a4:81:99: 66:34:b4:75:57:a1:d4:f2:c5:ed:f1:06:7c:15:54: 46:b0:b6:39:7e:1e:0e:9c:a8:fb:c0:b9:d7:65:a1: 31:31:13:c0:34:84:bd:1d:35:6b:bd:3a:b8:41:87: ed:90:53:24:ca:2f:62:af:e4:f4:8f:43:f4:34:1c: 00:83:e7:eb:0f:eb:68:63:26:43:bd:b6:2e:aa:5a: 2c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:07:9E:F8:72:BD:9A:3D:1B:4A:AE:7C:FD:24:E3:F9:B2:7C:45:54 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fb800bcf-022c-455e-b7cd-44f32fcec7fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f03e::/48 Signature Algorithm: sha256WithRSAEncryption 08:4c:4f:76:3d:21:3d:5e:9e:a2:87:ba:48:c5:c3:e4:60:34: 80:15:15:23:47:5d:89:71:f2:29:ad:d2:e2:25:e6:fc:23:ef: 92:57:eb:1f:9b:ca:57:bc:54:98:46:c5:8a:db:7a:c6:87:66: 73:01:9e:81:7d:47:d8:6b:20:38:d4:95:d0:60:5f:b2:df:c5: 89:87:5a:5a:14:0d:b2:8d:b1:60:46:bd:6d:a6:64:a9:e3:ea: be:d2:c9:59:54:83:bd:b3:6d:54:e4:98:67:aa:ea:29:c2:72: c6:f1:d3:25:f8:8b:e8:2b:53:71:eb:5d:88:6a:02:9e:85:b4: 38:43:e0:88:d9:4e:92:fe:09:c2:4f:c0:c2:62:24:f7:a1:f1: 0f:9f:68:b5:d1:19:d7:ca:44:a7:c8:5b:4b:7a:38:33:25:ec: 64:d3:d1:69:23:95:40:f6:7f:d1:2e:52:34:aa:09:6f:8d:5b: d1:d6:79:87:c1:fb:62:bb:14:2e:93:cc:85:f3:d2:98:0f:35: 4a:3c:20:65:c0:fc:2e:6b:43:a2:22:b1:f6:2a:8f:5a:5b:c7: cb:a8:83:99:d0:0c:05:12:e3:f5:b2:6b:62:9e:da:88:d5:50: ed:3d:44:47:3c:7e:43:80:be:6b:9d:f7:57:2b:e0:3d:0c:16: 47:fd:23:e0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKmYz31InaRqd4B1Vu3qK94jEbxcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMjA1MDAwMDAwWhcNMjUwMzEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkODA4ZTg5Zjc4Y2JkYmMzNTc2OTI5YzQxNmU4YWY3NjE4 ODA0MzljODM0ODVkNjQ0Y2E5YjFlOWMwNDY0ZWY3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoMHBhv/L8SRE7UfkYvpUnensi7GOQC8IzzD/RhKgi4Rl3 OeOiQajbIvMUy8WP50MIrKm8yq5NXJjaOqpOoOReBNXRmj160BG8pDsOXRQsKMR4 +Tq8mGOUaH3TvhXVZmMxy44F1sZ7ohd4dVfWfnB0GnNh8APyg2O1QYpaHHfYEdCp +P3aQ/ZXyusc3jw+QJPD6K+b1qUx/gWT9vAKshjoqumkimchq34NNixun3NuUKSB mWY0tHVXodTyxe3xBnwVVEawtjl+Hg6cqPvAuddloTExE8A0hL0dNWu9OrhBh+2Q UyTKL2Kv5PSPQ/Q0HACD5+sP62hjJkO9ti6qWixxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXQee+HK9mj0bSq58/STj+bJ8RVQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2ZiODAwYmNmLTAyMmMtNDU1ZS1iN2NkLTQ0ZjMyZmNlYzdmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8D4wDQYJKoZIhvcNAQELBQADggEBAAhMT3Y9IT1enqKHukjFw+Rg NIAVFSNHXYlx8imt0uIl5vwj75JX6x+byle8VJhGxYrbesaHZnMBnoF9R9hrIDjU ldBgX7LfxYmHWloUDbKNsWBGvW2mZKnj6r7SyVlUg72zbVTkmGeq6inCcsbx0yX4 i+grU3HrXYhqAp6FtDhD4IjZTpL+CcJPwMJiJPeh8Q+faLXRGdfKRKfIW0t6ODMl 7GTT0WkjlUD2f9EuUjSqCW+NW9HWeYfB+2K7FC6TzIXz0pgPNUo8IGXA/C5rQ6Ii sfYqj1pbx8uog5nQDAUS4/Wya2Ke2ojVUO09REc8fkOAvmud91cr4D0MFkf9I+A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:55 2025 by rpki-client